$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/caefe159-b60c-4d72-9342-6b935e1ff106.roa File: caefe159-b60c-4d72-9342-6b935e1ff106.roa (raw, json) Hash identifier: PGa+e4W+wisoiZejNM/DxZeBbtWBuaG9ARsARPNqkBI= Subject key identifier: 67:91:A6:F1:DD:98:A9:14:6E:9D:AE:B3:6A:00:40:F0:2F:AC:B3:B5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5C62F99B8F3ACDE2F8B91598BB768B1060F2C730 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/caefe159-b60c-4d72-9342-6b935e1ff106.roa Signing time: Wed 25 Feb 2026 00:20:08 +0000 ROA not before: Wed 25 Feb 2026 00:20:08 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:f03f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:62:f9:9b:8f:3a:cd:e2:f8:b9:15:98:bb:76:8b:10:60:f2:c7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 25 00:20:08 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=4827a8c6ef9f23beb9e748861e3df27a17e60b180d9e4dc68f66dc3fd986372c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:0d:fd:7d:3d:cf:24:cd:44:9f:13:c2:23: 59:7f:b9:79:9b:21:f0:b1:e7:41:b6:8d:51:a3:46: be:9b:b1:f6:63:5b:6b:54:fa:7d:82:6e:2e:ff:09: bc:8e:7b:81:96:01:c6:17:f0:a2:7d:12:fc:06:ef: b1:8c:c2:be:14:bc:28:99:9e:b4:2e:f8:22:cd:74: 30:1b:2d:15:5b:47:34:b1:ad:79:5c:79:67:a8:c5: 53:ba:e2:4d:8a:8d:d2:a2:37:f9:ef:b2:b4:1d:fe: 7d:34:3f:69:28:e6:25:fc:1b:1f:9b:6f:10:f3:64: 72:d4:c0:56:55:f4:af:a3:e8:58:9c:d9:36:c2:16: 8e:4d:64:31:38:b2:e8:c2:4a:4a:e2:2f:23:6e:03: cb:ca:bd:d9:57:2e:50:f1:b8:cc:81:84:b7:91:bd: 7e:22:65:c4:2d:30:d8:55:dd:c7:77:00:73:cc:bb: 11:4d:5a:05:84:de:b5:41:c9:cb:30:5e:c3:d6:14: 0c:0e:e7:ac:f3:cf:47:40:ab:35:45:da:d1:da:b0: d0:36:7a:8e:e4:e1:f6:fa:4d:f3:d5:4b:00:bf:5a: cc:d5:f9:2f:69:b7:7f:70:bf:5c:cb:91:f7:e4:e8: 90:47:c6:c8:5a:bb:17:df:10:6f:fe:16:57:5d:c2: 62:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:91:A6:F1:DD:98:A9:14:6E:9D:AE:B3:6A:00:40:F0:2F:AC:B3:B5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/caefe159-b60c-4d72-9342-6b935e1ff106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03f::/48 Signature Algorithm: sha256WithRSAEncryption 43:d0:b7:ac:46:56:eb:b8:2c:90:43:7e:79:96:bc:01:b1:af: 61:ea:ff:8b:05:5b:f6:2c:ff:c6:18:5b:51:0e:a2:b5:1e:64: 73:87:55:58:36:ad:75:68:f9:82:5e:64:ad:58:de:f4:79:d8: 26:a3:a5:01:e8:c7:d2:ad:0e:f3:28:5f:38:65:ec:55:56:f0: 8d:7f:15:58:bb:b8:1f:5b:9e:fe:5c:b7:f0:b2:82:9d:00:b3: 5e:b0:e1:37:94:c2:14:b2:7b:1f:c5:49:2c:35:7d:e8:fd:a5: bb:d5:08:76:bd:6d:23:18:04:86:cf:30:e7:ee:47:f3:e0:73: 3c:10:26:7c:12:1a:14:17:7f:69:fa:25:06:ba:60:35:ce:62: 52:9f:bd:63:9e:d2:86:58:e5:ed:1d:08:f9:6b:39:2e:5b:8b: 67:a6:64:70:49:3c:b8:ac:ed:b8:78:46:53:67:70:16:55:29: 9f:99:25:64:14:ba:d4:e9:28:00:7a:c3:c4:ae:fd:e8:ec:e1: 1d:30:6c:61:ce:45:d7:1c:32:74:8a:79:c7:d2:e5:d6:4f:3f: 89:2f:bf:9a:fe:78:12:99:ac:40:4a:07:62:c1:c6:d5:88:a9: 5f:0b:81:c7:af:de:46:97:f8:0c:f6:61:12:9e:a4:87:d9:73: 76:f4:c1:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXGL5m486zeL4uRWYu3aLEGDyxzAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI1MDAyMDA4WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODI3YThjNmVmOWYyM2JlYjllNzQ4ODYxZTNkZjI3YTE3 ZTYwYjE4MGQ5ZTRkYzY4ZjY2ZGMzZmQ5ODYzNzJjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjyQ39fT3PJM1EnxPCI1l/uXmbIfCx50G2jVGjRr6bsfZj W2tU+n2Cbi7/CbyOe4GWAcYX8KJ9EvwG77GMwr4UvCiZnrQu+CLNdDAbLRVbRzSx rXlceWeoxVO64k2KjdKiN/nvsrQd/n00P2ko5iX8Gx+bbxDzZHLUwFZV9K+j6Fic 2TbCFo5NZDE4sujCSkriLyNuA8vKvdlXLlDxuMyBhLeRvX4iZcQtMNhV3cd3AHPM uxFNWgWE3rVBycswXsPWFAwO56zzz0dAqzVF2tHasNA2eo7k4fb6TfPVSwC/WszV +S9pt39wv1zLkffk6JBHxshauxffEG/+FlddwmK7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZ5Gm8d2YqRRuna6zagBA8C+ss7UwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NhZWZlMTU5LWI2MGMtNGQ3Mi05MzQyLTZiOTM1ZTFmZjEwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D8wDQYJKoZIhvcNAQELBQADggEBAEPQt6xGVuu4LJBDfnmWvAGx r2Hq/4sFW/Ys/8YYW1EOorUeZHOHVVg2rXVo+YJeZK1Y3vR52CajpQHox9KtDvMo Xzhl7FVW8I1/FVi7uB9bnv5ct/Cygp0As16w4TeUwhSyex/FSSw1fej9pbvVCHa9 bSMYBIbPMOfuR/PgczwQJnwSGhQXf2n6JQa6YDXOYlKfvWOe0oZY5e0dCPlrOS5b i2emZHBJPLis7bh4RlNncBZVKZ+ZJWQUutTpKAB6w8Su/ejs4R0wbGHORdccMnSK ecfS5dZPP4kvv5r+eBKZrEBKB2LBxtWIqV8Lgcev3kaX+Az2YRKepIfZc3b0wZw= -----END CERTIFICATE-----Generated at Sun Mar 1 21:42:44 2026 by rpki-client